This image shows the Ortobom ERP architecture on Oracle Cloud Infrastructure (OCI). It includes 2 regions: a primary region in São Paulo that houses the ERP instances and databases and a secondary region that provides data disaster recovery. On-premises equipment at each of 17 factories communicates with the primary region by using a site-to-site virtual private network (VPN) and a dynamic routing gateway (DRG).

The regions include the following services:

Oracle Cloud Infrastructure Audit
Oracle Cloud Infrastructure Identity and Access Management
Oracle Cloud Infrastructure Logging
Oracle Cloud Infrastructure Object Storage
Policies
Backup services (primary region only)

The primary region includes 1 virtual cloud network (VCN) with the following gateways:

Dynamic routing gateway (DRG): Provides private connectivity between on-premises networks and VCNs by using Site-to-Site VPN connected to the DRG. The DRG also route traffic between VCNs for remote peering.
Service gateway: VCNs communicate with services such as object storage over the Oracle network fabric without traversing the internet.

The VCN provides 3 subnets:

Applications private subnet: Virtual machine (VM) instances host Protheus instances and Oracle Enterprise Manager.
Exadata client private subnet: Includes Oracle Exadata Database Service on Dedicated Infrastructure and 3 container databases (CDBs) for payroll, invoicing, and compliance.
Exadata backup private subnet: Oracle Exadata Database Service on Dedicated Infrastructure backup support.

The secondary region includes a single VCN with private Exadata client and Exadata backup subnets that house a secondary instance of Oracle Exadata Database Service on Dedicated Infrastructure. The backup Exadata instances in each region are connected by Oracle Data Guard. In addition, backups in object storage are replicated in the secondary region.